Jump to content

rastating

Active Members
  • Posts

    12
  • Joined

  • Last visited

Posts posted by rastating

  1. 1 hour ago, WatskeBart said:

    When running the following payload:

    
    LED G
    ATTACKMODE RNDIS_ETHERNET

    And try to SSH into the bunny (172.16.64.10) with Putty. As root I always get 'Access Denied'

    I've change the default password using attackmode serial but that password is not working for SSH. I even set it back to the default hak5bunny password, but still no joy.

    What am I missing here?

     

    172.16.64.10 will be the IP address your host machine has been assigned. The IP address of the bunny will be 172.16.64.1

    Default values from the wiki are:

    Username: root
    Password: hak5bunny
    IP Address: 172.16.64.1
    DHCP Range: 172.16.64.10-12

     

    • Upvote 2
  2. 2 hours ago, theonewhoknocks said:

    If it only reads it at boot, I can probably rig up a script to read the states of the switch as it's probably tied to something in /dev/. Then the real fun can begin.

    That'd be cool! Let me know if you figure it out, as it'd be handy to have the state detection

  3. What position have you got the switch in? It should be in position 3 to enter arming mode (i.e. the switch position closest to the USB input itself). If you've left it switched on one of the payloads, no LEDs will come on after the initial boot sequence, if I'm correct.

  4. 5 hours ago, theonewhoknocks said:

    I don't know if this is practical at all, but I think it'd be pretty cool to be able to flip the switch a series of times to access different payloads or render the bunny inactive/active. Depending on the types of signals you guys use. Does the bunny necessarily restart after you flip the switch or is there an internal kill bash that happens and it switches to execing the other payload? Haven't got mine yet so I don't know. If so, I could probably put conditional logic to hide or disable the scripts.

    Changing the switch position doesn't currently restart it / execute the payload associated with the new switch position.

  5. I just gave the USB-exf payload a try on Windows 10, and it worked OK for me.

    I tried with varying cases on the extensions too (i.e. .pdf and .PDF) and worked OK.

    Which xcopy command do you have uncommented in e.cmd?

    I currently have:

    REM xcopy /C /Q /G /Y /E %USERPROFILE%\Documents\*.pdf %dst% >>nul
    
    REM Same as above but does not create empty directories
    xcopy /C /Q /G /Y /S %USERPROFILE%\Documents\*.JPG %dst% >>nul
    )

    (Changed extension to JPG for testing purposes)

    According to the comments in the script though, it shouldn't create any empty directories

×
×
  • Create New...